Static task
static1
Behavioral task
behavioral1
Sample
70d7c5689cf57c917ae42f1362170c26_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
70d7c5689cf57c917ae42f1362170c26_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70d7c5689cf57c917ae42f1362170c26_JaffaCakes118
-
Size
655KB
-
MD5
70d7c5689cf57c917ae42f1362170c26
-
SHA1
b16e9555ec3d3f6d96b7a21966b8209edbd6ce01
-
SHA256
a69e3ff405e852b00c4d2264141069d405d33c24eced51b19d8231f941beed07
-
SHA512
72695fce067f5c7f796de1c6be9690ad18c3512de530a503b9891dbab70d88253e60cdc05bdc75aee7709c243ab1636323bbba267905f185569cbe76ee98d6b1
-
SSDEEP
12288:3/9vOs/8yKS2oh8UokxBYdtN+lcLCPGF8jAtYB22azaLgzaLUcDDWCrmEL0R:PhOs/RKSbrpctnLCPGF8jAq1aSgWLUsi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70d7c5689cf57c917ae42f1362170c26_JaffaCakes118
Files
-
70d7c5689cf57c917ae42f1362170c26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.icode Size: 840B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 3.0MB
.reloc Size: - Virtual size: 448KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.entry Size: 296KB - Virtual size: 300KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE